yichen-web-research

Warn

Audited by Snyk on Aug 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). 在该 Skill 的横纵研究模式中,运行时会先生成离线 brief/plan,再由 $yichen-unified-search 打开候选原文并“逐主张核对”;该模式的 assemble_hengzong_evidence.py 仅对已由搜索/归档层提供的结构化 bundle 做离线门控,不会自行主动读取外部自由文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 25, 2026, 08:34 AM
Issues
1
Security Audit — snyk — yichen-web-research